RE: Free CA

[mark schoneman]

In the January issue of Computer Security Journal, Carl Ellison and
Bruce 
Schneier have article "Ten Risks of PKI: What You're not Being Told
about 
Public Key Infrastructure"

It can be found at http://www.counterpane.com/pki-risks.html

It really addresses policy and process issues more than technical
weaknesses.